Log into container registry with the token #1

Merged

stb merged 8 commits from enable-container-registry-push into main 2026-10-18 13:39:06 +02:00

Conversation 0 Commits 8 Files changed 3 +121 -170

stb commented 2026-08-19 20:11:08 +02:00

Owner

• Copy link

No description provided.

stb added 1 commit 2026-08-19 20:11:08 +02:00

Log into container registry with the token 4b289f239b

stb added 1 commit 2026-10-18 12:43:21 +02:00

Use docker-login@v3 for registry auth, bump upload to v3 ... f9c48e8121

docker-login writes the OIDC token into the Docker config directly,
replacing the token + docker/login-action pair. Image tags now use the
registry host it reports instead of the server URL with its scheme.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

stb added 4 commits 2026-10-18 13:00:28 +02:00

Delete the existing package file before uploading on PR runs ... 925f6f8aff

The package registry does not allow overwriting files, so repeated PR
runs failed to upload.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Version PR builds as <closest tag>-pr<number> ... aef88c82aa

PR runs used github.ref_name, which is just the PR number. Compute the
version once in a separate job: the tag on tag pushes, otherwise the
closest v* tag reachable from the branch's fork point plus the PR
number (v0.0.0 if there is none).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Only tag the Docker image as latest on tag pushes ... 81e3e238bb

PR runs were moving latest to unmerged code.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge the release workflow into CI ... a064c7c94d

Release rebuilt the same binary matrix as CI. Forgejo can't hand
artifacts from one workflow run to another, so publish from the CI
cross-build jobs instead, on tag pushes and PRs. Publishing is now
gated on the tests passing, and CI builds use the release flags.

Drop the unused tarball and build the binary straight to its upload
name.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

stb added 1 commit 2026-10-18 13:12:16 +02:00

Use one workflow-wide OIDC audience ... 03cabceacf

The Docker login used a different audience than the package uploads,
and only the package one is correct.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

stb added 1 commit 2026-10-18 13:27:37 +02:00

Merge remote-tracking branch 'origin/main' into enable-container-registry-push ... 6832b3b182

# Conflicts:
#	.forgejo/workflows/ci.yml
#	.forgejo/workflows/release.yml

stb merged commit e11595fbab into main 2026-10-18 13:39:06 +02:00

stb deleted branch enable-container-registry-push 2026-10-18 13:39:06 +02:00

stb referenced this pull request from a commit 2026-10-18 13:39:06 +02:00

Use upload-package action for docker (#1)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

stb/mini-s3!1

No description provided.